Abstract:In today's cyber world, the Internet has become a vital resource for providing a plethora of services. Unavailability of these services due to any reason leads to huge financial implications or even consequences on society. Distributed Denial of Service (DDoS) attacks have emerged as one of the most serious threats to the Internet whose aim is to completely deny the availability of different Internet based services to legitimate users. The attackers compromise a large number of Internet enabled devices and gain malicious control over them by exploiting their vulnerabilities. Simplicity of launching, traffic variety, IP spoofing, high volume traffic, involvement of numerous agent machines, and weak spots in Internet topology are important characteristics of DDoS attacks and makes its defense very challenging. This article provides a survey with the enhanced taxonomies of DDoS attacks and defense mechanisms. Additionally, we describe the timeline of DDoS attacks to date and attempt to discuss its impact according to various motivations. We highlighted the general issues, challenges, and current trends of DDoS attack technology. The aim of the article is to provide complete knowledge of DDoS attacks and defense mechanisms to the research community. This will, in turn, help to develop a powerful, effective, and efficient defense mechanism by filling the various research gaps addressed in already proposed defense mechanisms.

Quantitative Characterization of Denial of Service: A Location Service Case Study

Quantifying Network Denial of Service: A Location Service Case Study

Quantitative Threat Assessment of Denial of Service Attacks on Service Availability

LQG Control under Denial-of-Service Attacks: an Experimental Study

Detection and Response of Low-Rate TCP-targeted Denial of Service Attacks

Defending Against Denial of Service Attacks

A Queueing Analysis for the Denial of Service (dos) Attacks in Computer Networks

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Distributed Localization in Wireless Sensor Networks Under Denial-of-Service Attacks

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

DDoS Attack in Software Defined Networks: A Survey

Real-time Estimation of DoS Duration and Frequency for Security Control

DoS Attack on Networked Control System: From the Viewpoint on Communication-Control Cost

Distributed Denial of Service Attacks: A Threat or Challenge

DoS Attacks and Countermeasures on Network Devices

Characterization of Multi-Channel Denial-of-Service and Full-Scale Denial-of-Service

Detecting DDoS Attacks Based on Network Connection Statistics

On Denial of Service Attacks in Software Defined Networks

Characterizing the Impacts of Application Layer DDoS Attacks

Towards Risk Evaluation of Denial-Of-Service Vulnerabilities in Security Protocols

A Defense Mechanism for Distributed Denial of Service Attack in Software-Defined Networks